Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96930 | medium | 5.5 | No | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 2026-10-16 |
| CVE-2026-67242 | medium | 5.4 | No | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isinteger(Exp) guard skips token-expiry checks for fl... | 2026-10-16 |
| CVE-2026-96325 | high | 7.5 | No | Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. | 2026-10-16 |
| CVE-2026-96324 | high | 7.8 | No | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96323 | high | 7.0 | No | Use after free in Windows Update allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96322 | high | 7.0 | No | Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96319 | high | 7.0 | No | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96318 | high | 7.8 | No | Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96317 | high | 7.8 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96316 | medium | 5.5 | No | Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. | 2026-10-16 |
| CVE-2026-96315 | medium | 5.5 | No | Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. | 2026-10-16 |
| CVE-2026-96314 | medium | 5.5 | No | Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | 2026-10-16 |
| CVE-2026-96313 | high | 7.0 | No | Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96312 | high | 7.8 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96311 | medium | 5.5 | No | Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. | 2026-10-16 |
| CVE-2026-96310 | high | 7.0 | No | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96309 | high | 7.8 | No | Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96308 | high | 7.8 | No | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96307 | high | 7.0 | No | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96306 | high | 7.8 | No | Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally. | 2026-10-16 |